Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/9mNye07ZQu0Av9YkqIbqq0xecco.roa
File: 9mNye07ZQu0Av9YkqIbqq0xecco.roa (raw, json)
Hash identifier: ynMkRWsjhxzGMlRjgCim70cRCUkaV3Kiu/IVmzhzT4A=
Subject key identifier: F6:63:72:7B:4E:D9:42:ED:00:BF:D6:24:A8:86:EA:AB:4C:5E:71:CA
Certificate issuer: /CN=3026806a6b8dac68c2a32b65849229524fc33da7
Certificate serial: 018CC7950EEEAF6B6AE137B745F18A81EF85
Authority key identifier: 30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/9mNye07ZQu0Av9YkqIbqq0xecco.roa
Signing time: Tue 02 Jan 2024 00:31:23 +0000
ROA not before: Tue 02 Jan 2024 00:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57399
IP address blocks: 193.201.149.128/26 maxlen: 26
2001:7f8:52::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 12 Mar 2024 11:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:0e:ee:af:6b:6a:e1:37:b7:45:f1:8a:81:ef:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3026806a6b8dac68c2a32b65849229524fc33da7
Validity
Not Before: Jan 2 00:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f663727b4ed942ed00bfd624a886eaab4c5e71ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7b:54:12:82:c8:e8:d4:03:84:33:20:1f:b7:
58:75:26:44:3f:1a:d4:05:f6:d8:b3:80:ef:20:26:
b7:db:e5:f8:4d:c9:74:fb:94:6e:57:78:4e:c2:d3:
8c:43:4f:51:75:9f:db:ac:ba:ca:15:f8:39:70:84:
16:7c:e8:ef:10:03:1d:c1:1f:15:39:be:af:60:58:
ad:01:9f:74:68:09:db:74:78:1f:48:1a:01:12:10:
6a:5e:42:e4:4b:7c:e9:da:c5:05:05:e2:ac:0a:4c:
0f:a8:08:63:43:dd:a5:2c:65:f6:f1:ec:d7:a9:b6:
96:c2:36:be:44:f5:18:8f:26:f6:b4:8d:eb:3f:25:
b2:41:fa:72:b0:8f:76:c1:85:e1:1c:25:15:96:ad:
ec:18:ed:5b:44:11:0f:8c:2f:6a:5a:a1:9f:28:67:
e9:1f:d3:4a:64:ee:2f:95:3b:8b:11:ef:ef:54:21:
62:4f:d3:01:2b:a0:94:cd:af:dc:25:6c:a1:80:a5:
8f:04:93:8d:1f:76:70:00:f5:e4:be:b3:f9:66:c4:
10:26:0b:33:ba:ea:96:88:ff:05:35:b9:7a:73:2b:
6b:22:5f:c4:e4:02:60:ed:b4:92:63:fe:be:ad:4a:
f1:e2:bc:51:de:13:bc:ad:e9:a8:39:19:2b:9d:53:
5d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:63:72:7B:4E:D9:42:ED:00:BF:D6:24:A8:86:EA:AB:4C:5E:71:CA
X509v3 Authority Key Identifier:
keyid:30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/9mNye07ZQu0Av9YkqIbqq0xecco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.149.128/26
IPv6:
2001:7f8:52::/48
Signature Algorithm: sha256WithRSAEncryption
2d:f6:2a:f6:b0:53:84:e3:4b:a8:fb:3f:4c:16:c5:25:bf:81:
3e:d2:41:ee:b1:59:41:82:09:d8:13:70:18:77:63:16:4f:06:
80:2b:38:44:93:d4:d3:59:77:2b:b6:13:97:28:74:e9:c0:0f:
21:8c:2a:ca:ed:33:f5:fc:28:ed:d2:f9:c2:f5:2b:fa:09:98:
a6:95:a1:9c:c5:ba:60:c8:73:73:64:72:6c:a1:7b:3b:ca:19:
24:8a:cb:41:8f:5b:b7:e9:66:69:6c:3e:63:c9:cc:4f:5f:9a:
08:89:74:5a:96:c1:2c:c2:9d:b5:11:a0:40:10:ee:19:b0:c3:
0b:4b:ba:79:3d:71:b2:c2:ad:85:05:8e:90:e9:f3:c6:cd:db:
9d:af:b3:0f:2d:bc:79:37:87:0f:6a:3d:94:2e:20:02:e6:51:
b2:ac:ca:ac:56:79:54:f1:5d:a4:65:8a:fd:2d:77:c5:bf:a4:
ef:58:84:ff:65:96:4b:1f:7a:de:ad:f7:4d:89:b3:13:27:5e:
79:cf:79:80:81:0c:0d:11:0e:51:2e:a2:f1:88:c2:b9:15:ce:
90:20:7f:91:5c:ec:20:6a:9b:65:fe:ec:12:ef:97:8b:f4:c4:
e0:b5:48:8f:29:0d:e7:aa:9a:0d:cd:87:7e:ac:ed:40:1a:bd:
8c:84:96:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:14 2024 by rpki-client on console-fra.rpki-client.org